Worrying report about TR-069 remote management of modem/routers

I only discovered this a few days ago, while liaising with my home ISP, to help a friend with one of their (ISP provided) low-power routers. They asked if I could check if their TR-069 remote URL was present after the latest firmware update.

I checked on what TR-069 functionality/protocol was (as I am NOT a comms/security specialist, just a SysAdmin), and got even more concerned when I read the CheckPoint PDF report.

https://www.rsaconference.com/writable/presentations/file_upload/hta-r04-the-internet-of-tr-069-thin...

Also see:
http://mis.fortunecook.ie/

Now a lot of that may be "old news", but the last few slides (from 49 onwards) from the CheckPoint report stood out for me, in that there are over 45 million vulnerable modem/routers in the wild, that was 80% of the installed base at 2015 figures.

I know that corporate users with good IT...